Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96244e20-91f9-32e3-9e62-d2d7ce8f05eb.roa
File: 96244e20-91f9-32e3-9e62-d2d7ce8f05eb.roa (raw, json)
Hash identifier: wBuXk92VpNyR2PPMxChy9+qSke83B2wDWPwI7yP2j4s=
Subject key identifier: CD:F6:14:19:55:D2:E9:4F:81:E2:9A:DC:AE:98:4A:47:81:D5:B9:DA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C36EB919E4121C24CBF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96244e20-91f9-32e3-9e62-d2d7ce8f05eb.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 96.234.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:36:eb:91:9e:41:21:c2:4c:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=02049b69-3697-40a5-b52c-1d3911fe2347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:90:db:5d:7b:ca:b6:7d:af:1b:af:7c:a7:
92:92:0b:1b:c6:94:da:f3:36:ac:83:c2:94:41:7e:
ec:7f:87:9f:59:74:bc:e8:25:9e:0d:4b:97:22:9e:
56:72:f1:bd:cc:61:bc:df:70:98:b7:c8:d3:58:62:
9c:e0:42:c3:fa:0c:e3:c6:c1:49:e3:bb:18:4e:d1:
d0:14:a7:df:9b:a3:42:94:c5:64:56:25:9d:d5:9a:
22:e8:a4:65:f8:51:07:2e:09:86:32:5b:6c:ec:b7:
73:52:43:70:96:a0:fa:3f:f5:96:b4:46:2d:bc:1b:
a4:3e:e6:a2:c9:fa:ed:2d:f9:26:03:01:e4:51:bb:
30:4a:a0:0b:65:c0:d5:71:4e:ef:74:1e:5d:cd:58:
1b:a7:0d:ac:43:cc:51:9e:76:1d:b0:57:a2:8e:34:
34:81:37:8a:c8:d3:c1:f0:92:f8:25:24:a8:47:de:
35:8c:9c:29:6b:ba:9a:36:1e:d0:f4:30:88:b7:ba:
b5:40:4a:bc:2c:9c:af:29:4f:41:95:ea:ce:8e:1e:
5b:0e:ca:14:a8:42:45:ed:b2:4b:b4:f2:45:e5:0f:
81:34:c2:c0:46:f1:1f:b9:cf:bf:2e:73:bc:06:2c:
fa:8e:31:f3:92:d7:aa:da:d1:06:62:e6:0d:16:61:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:14:19:55:D2:E9:4F:81:E2:9A:DC:AE:98:4A:47:81:D5:B9:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96244e20-91f9-32e3-9e62-d2d7ce8f05eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.234.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:46:4e:81:49:9d:9a:1e:a9:ca:e6:cd:e4:4e:55:3e:b8:76:
1d:80:74:89:41:2f:46:f8:5d:c5:e0:40:8a:8a:d9:db:98:f9:
b8:7b:dd:53:52:fe:27:46:33:00:74:22:7f:02:17:3f:40:3d:
20:4b:be:88:44:4b:73:0b:34:02:fa:f1:8a:1d:45:73:38:d1:
bd:dc:49:87:4a:97:27:a7:a8:71:4d:e0:08:fc:fc:50:52:55:
4e:ed:ae:c6:9f:4a:c6:a1:10:4a:bb:92:e1:94:d8:42:c5:ef:
ab:61:9a:5e:6d:6c:85:cd:46:71:16:10:77:d5:6d:36:a5:70:
90:e2:24:8e:2c:84:69:89:da:cf:41:0b:a8:ca:12:0a:77:17:
b4:5c:dc:53:1e:d7:11:4e:03:38:b7:22:fd:55:2f:8a:98:99:
96:e8:ee:63:3b:3f:b1:59:0f:73:89:77:e8:43:da:34:8c:c0:
ae:9a:f5:74:10:db:b0:23:d1:9f:f6:b6:06:d3:c4:21:0b:c0:
c1:76:6a:9c:f8:af:31:d1:97:a0:24:65:b8:81:9d:a2:c2:78:
c1:19:a8:53:4c:f3:0f:51:23:51:c9:a8:ae:a5:96:24:63:52:
91:b4:b0:60:cd:85:09:25:bc:66:5d:99:f8:63:1d:db:25:08:
40:d5:c9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:29 2025 by rpki-client